Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39332e302f32342d3234203d3e203633363037.roa
File:                     3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (raw, json)
Hash identifier:          2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=
Subject key identifier:   A6:91:2A:62:6E:4D:88:26:2A:F6:18:C3:72:B1:62:6D:C7:90:A8:B4
Certificate issuer:       /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Certificate serial:       359E2803D131565B4875F417CABDD586797EC781
Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39332e302f32342d3234203d3e203633363037.roa
Signing time:             Fri 26 Jun 2026 04:32:02 +0000
ROA not before:           Fri 26 Jun 2026 04:27:02 +0000
ROA not after:            Fri 25 Jun 2027 04:32:02 +0000
asID:                     63607
IP address blocks:        103.220.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9e:28:03:d1:31:56:5b:48:75:f4:17:ca:bd:d5:86:79:7e:c7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
        Validity
            Not Before: Jun 26 04:27:02 2026 GMT
            Not After : Jun 25 04:32:02 2027 GMT
        Subject: CN=A6912A626E4D88262AF618C372B1626DC790A8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:d1:7a:9c:26:88:82:bf:eb:9c:79:de:48:
                    be:a7:c3:1c:0a:72:d6:1d:88:1b:1e:56:59:e5:f5:
                    8d:27:4b:bd:78:fd:28:2d:47:ed:6c:d8:24:e9:b8:
                    80:1c:74:29:49:4f:50:88:f7:c5:d3:d9:0e:66:85:
                    95:0d:9f:db:8c:49:69:f2:7e:03:94:64:0c:9d:77:
                    72:36:51:67:e2:7e:15:17:e9:eb:9b:67:79:16:d4:
                    c6:a4:ef:90:2f:bc:f4:80:89:bd:e0:29:c2:93:bf:
                    f9:54:87:6a:54:1f:d1:e3:f5:68:f7:2f:f2:4f:8c:
                    79:3b:4f:ed:03:99:90:69:8d:59:f4:a2:cb:0c:9f:
                    3f:ce:25:8b:b0:ab:02:18:a7:49:63:d0:d8:86:c6:
                    fd:a7:1b:6f:d4:7b:02:f9:47:ae:9c:48:9b:ad:fa:
                    29:dd:5d:99:fa:a0:aa:b6:d7:cc:6b:4a:54:9f:7b:
                    5b:07:7c:8a:3e:df:2c:cc:a3:6d:64:aa:b9:51:5d:
                    cf:2a:f2:d5:83:1f:4f:45:d0:7c:63:5c:4e:9e:63:
                    e1:95:83:17:c2:1d:75:43:13:bc:85:b4:dc:b2:ed:
                    87:45:d6:d7:78:bc:0d:10:eb:ba:42:7a:60:a9:58:
                    7c:89:56:15:2d:29:b1:8d:82:9c:5f:51:c5:0a:40:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:91:2A:62:6E:4D:88:26:2A:F6:18:C3:72:B1:62:6D:C7:90:A8:B4
            X509v3 Authority Key Identifier:
                keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/3130332e3232302e39332e302f32342d3234203d3e203633363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:d7:a1:94:5f:40:16:23:47:fd:72:b2:26:26:f4:1f:fa:
         d5:9a:6d:a3:2b:4c:53:55:5e:18:03:c5:40:a5:5e:88:2b:b8:
         62:48:b5:04:7d:db:09:59:45:f8:cc:2a:42:68:62:25:97:f3:
         1b:d5:7f:76:bf:60:50:cd:9c:1a:3a:e9:3f:6d:39:fa:21:18:
         89:ad:57:68:92:93:74:51:bb:f6:34:fb:15:a3:80:5b:4d:ec:
         b7:a4:d6:be:b8:23:0b:b8:b0:68:8a:95:e6:55:78:d0:25:13:
         86:b5:17:ab:77:50:91:c7:95:a1:81:eb:a9:27:72:96:60:f6:
         ea:d4:20:ea:81:10:af:b5:30:13:ef:ed:c7:93:d8:a5:d0:7d:
         ff:d3:ee:d7:46:e6:57:cf:0d:92:f4:13:ba:a0:8e:61:8e:f9:
         c4:ad:f6:2d:4a:0a:a7:70:d6:68:75:e2:3e:22:68:b5:f2:2f:
         56:98:7e:24:fe:29:25:1c:b3:77:a4:eb:c0:8b:20:fa:3f:71:
         e0:a7:4d:16:15:41:81:1a:dd:47:22:b5:cf:eb:2b:f4:82:8e:
         64:f1:ea:cd:e8:8f:59:d0:4a:1b:48:51:23:4e:3b:57:c4:5f:
         87:37:91:72:5b:ed:cc:19:67:c0:c9:fb:c7:87:6d:87:53:ed:
         6b:b1:14:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:24 2026 by rpki-client